catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilities

Cisco Talos disclosed multiple vulnerabilities affecting catdoc (three zero-days leading to heap/ memory corruption), Parallels Desktop (directory traversal and several privilege-escalation flaws), NVIDIA cuobjdump (ELF section integer overflow enabling out-of-bounds write), and High-Logic FontCreator (out-of-bounds read). Talos provides CVE mappings, technical impact descriptions, and guidance that vendors patched the issues or that Talos published fixes and Snort rule coverage; no active exploitation in the wild is reported.